kohana/core — pull request #401 by acoulton (2013-09-26 09:56:49+00:00)
Title: Only copy original request headers when following redirects [fixes #4790]

When following a redirect, the client should not add NULL headers
from the follow_headers list that were not set on the original
request. This prevents problems when requesting URLs that
include an authorization signature calculated from the request URL
and headers.

Fixes http://dev.kohanaframework.org/issues/4790